Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa
File: 59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json)
Hash identifier: xx/1db9Dpy4RGAf/JrREnd+1c+ecVcvYbUVoJCCHons=
Subject key identifier: 1A:70:19:CA:3C:B4:49:EA:05:FD:F6:55:C0:A0:2D:97:3B:41:6D:B1
Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial: 010D0C9F43285848100A7C1EE1EDB64FECF0E300
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 397131
IP address blocks: 23.170.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7c:1e:e1:ed:b6:4f:ec:f0:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=1c3121da-fcec-48d0-b887-7fda35456faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:93:a4:7b:7e:5b:28:a9:82:b5:95:be:e8:
2e:dc:ee:de:37:6b:5d:91:c4:93:1f:45:f8:7c:99:
d1:1d:fb:f0:4d:12:6a:18:cf:99:20:22:3b:a2:4c:
76:73:b0:ab:2f:95:a3:fd:cd:fa:35:48:7c:97:a8:
cc:24:37:ff:50:65:14:28:02:4b:a5:ee:8d:6e:66:
95:9b:e1:8f:06:27:ac:6b:c1:1c:d5:37:d4:01:b8:
43:10:a2:d5:b9:3a:68:ef:75:b5:c2:55:24:40:6e:
75:2b:53:ee:6f:1d:2a:c1:f0:3f:31:de:aa:01:4b:
d6:1e:1b:7c:52:31:4b:e2:39:40:1b:52:fb:c6:e6:
72:bf:3e:5d:55:a4:9d:87:c2:3c:43:b8:f0:8d:16:
37:6b:f8:1a:23:9f:7a:8c:8e:3b:53:a9:8c:77:94:
32:2d:93:5b:d9:3b:a1:a2:54:8e:7c:ef:55:ba:72:
a5:eb:14:2c:e1:7a:d4:60:1e:ae:84:28:2e:9b:de:
93:34:41:bd:c9:8d:29:19:11:03:16:4c:f4:9e:4c:
d6:b5:4f:db:cd:f1:b2:f0:18:bb:57:fb:d2:fd:da:
08:45:f2:fd:de:f7:c7:26:5a:50:e9:41:63:95:15:
e1:f7:52:d4:a6:f2:58:80:b1:15:f4:00:7f:d9:72:
f7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:70:19:CA:3C:B4:49:EA:05:FD:F6:55:C0:A0:2D:97:3B:41:6D:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
X509v3 Authority Key Identifier:
keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
sbgp-ipAddrBlock: critical
IPv4:
23.170.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:dc:7a:82:d8:01:70:12:aa:a3:2e:72:07:11:2c:68:c0:7c:
67:0a:d2:2f:33:21:e5:3e:cd:4e:7e:e9:8a:6c:20:2c:e2:e6:
ed:df:a0:26:cc:1b:78:b8:ac:ac:9c:da:0d:02:1a:58:5c:07:
82:7e:d0:2b:45:b5:12:10:9e:40:4b:b6:27:3d:86:03:78:cd:
97:96:84:23:eb:4a:d9:e9:bc:60:f9:4a:db:50:e8:58:12:56:
8a:19:59:63:14:43:f7:5c:b4:28:46:3d:c0:25:c1:bc:bf:c0:
e5:f1:5e:f7:6b:51:88:aa:2f:87:9a:2b:1e:aa:65:41:11:67:
c3:6f:e8:23:65:65:fc:0f:7d:1f:87:7d:d7:db:70:ec:d4:39:
0c:39:eb:73:b6:54:c8:e5:cf:e1:7b:da:97:cb:5f:10:77:a8:
a8:94:8b:ee:a0:87:aa:37:11:4b:50:37:74:2b:e0:cf:c4:76:
c4:d1:34:ef:08:dd:23:6b:89:f9:57:37:cd:57:b1:e9:78:7d:
e7:35:20:45:82:0b:ef:b6:db:66:ca:ca:2a:3e:b6:37:e6:f3:
ab:e6:7c:61:e9:dd:ac:d4:02:ff:42:b1:09:f5:7a:a5:44:c9:
38:e9:86:f7:1f:b6:0d:f2:f8:0c:28:b3:cb:6b:66:c2:1c:49:
44:59:fc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:51 2025 by rpki-client